A writeup for “When Hearts Collide” on TryHackMe.

Hello everyone. During mobile application assessments, we often need the IPA file for static analysis. However, on iOS 18+ devices, many…

When I needed to look up a threat actor, I often found myself unsure where to begin.

Gobuster scan results revealing the discovered “/admin” directory. TryHackMe Upload Vulnerabilities: From File Upload to Remote Code Execution A black-box pentest-style walkthrough of bypassing …

Let’s be honest: in a world obsessed with agile, continuous delivery, and “move fast, break things,” it’s easy to question whether test…

Scope and Objective

Room Link: https://tryhackme.com/room/databasesqlbasics

🔗 Room Link : https://tryhackme.com/room/axss

Task 1 — Introduction to Red Teaming

A Complete TryHackMe Write-Up Demonstrating Real SOC Investigation Methodology

Predictable RSA seeds allow private key recreation and signature forgery.

React2Shell exploit leads to shell access and root privilege escalation.

Recently, I completed the Red Team OPSEC room on TryHackMe. This room focuses on one of the most overlooked but critical aspects of red…

🚩CaptureTheFreeFlag

A Fictional Scenario: Authentication Bypass → BOLA/IDOR → Business Damage

Understanding IDOR in APIs: A Silent but Dangerous Vulnerability

Hello people. Here’s another blog; this one is another bug you can find real quick.

I got tired of doing the same thing manually every single time. Open terminal, run subfinder, wait, run httpx, wait, fire up nuclei, wait…

start the machine >>> you will get ip adddress